Vulnerability Details : CVE-2016-3521
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types.
Products affected by CVE-2016-3521
- cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
- cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
- cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
Threat overview for CVE-2016-3521
Top countries where our scanners detected CVE-2016-3521
Top open port discovered on systems with this issue
3306
IPs affected by CVE-2016-3521 961
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2016-3521!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2016-3521
0.20%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 58 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2016-3521
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.8
|
MEDIUM | AV:N/AC:L/Au:S/C:N/I:N/A:C |
8.0
|
6.9
|
NIST | |
6.5
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
2.8
|
3.6
|
NIST |
References for CVE-2016-3521
-
http://rhn.redhat.com/errata/RHSA-2016-1604.html
RHSA-2016:1604 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168
IBM Security Bulletin: Multiple vulnerabilities in mariadb affect PowerKVMThird Party Advisory
-
http://www.securityfocus.com/bid/91787
Oracle July 2016 Critical Patch Update Multiple VulnerabilitiesThird Party Advisory;VDB Entry
-
https://mariadb.com/kb/en/mariadb/mariadb-5550-release-notes/
MariaDB 5.5.50 Release Notes - MariaDB Knowledge BaseVendor Advisory
-
https://mariadb.com/kb/en/mariadb/mariadb-10115-release-notes/
MariaDB 10.1.15 Release Notes - MariaDB Knowledge BaseVendor Advisory
-
http://rhn.redhat.com/errata/RHSA-2016-1601.html
RHSA-2016:1601 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
Oracle Critical Patch Update - July 2016Patch;Vendor Advisory
-
http://rhn.redhat.com/errata/RHSA-2016-1602.html
RHSA-2016:1602 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
http://www.debian.org/security/2016/dsa-3624
Debian -- Security Information -- DSA-3624-1 mysql-5.5Third Party Advisory
-
http://www.ubuntu.com/usn/USN-3040-1
USN-3040-1: MySQL vulnerabilities | Ubuntu security noticesThird Party Advisory
-
http://www.debian.org/security/2016/dsa-3632
Debian -- Security Information -- DSA-3632-1 mariadb-10.0Third Party Advisory
-
http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html
openSUSE-SU-2016:2278-1: moderate: Security update for mariadbMailing List;Third Party Advisory
-
http://www.securitytracker.com/id/1036362
MySQL Multiple Bugs Let Remote Users Access Data, Remote Authenticated Users Modify Data, Local or Remote Authenticated Users Deny Service, and Local Users Gain Elevated Privileges - SecurityTrackerThird Party Advisory;VDB Entry
-
http://rhn.redhat.com/errata/RHSA-2016-1603.html
RHSA-2016:1603 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
http://rhn.redhat.com/errata/RHSA-2016-1637.html
RHSA-2016:1637 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
http://www.securityfocus.com/bid/91932
Oracle MySQL CVE-2016-3521 Remote Security VulnerabilityThird Party Advisory;VDB Entry
-
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
Oracle Linux Bulletin - July 2016Vendor Advisory
-
https://mariadb.com/kb/en/mariadb/mariadb-10026-release-notes/
MariaDB 10.0.26 Release Notes - MariaDB Knowledge BaseVendor Advisory
-
http://rhn.redhat.com/errata/RHSA-2016-1480.html
RHSA-2016:1480 - Security Advisory - Red Hat Customer PortalThird Party Advisory
Jump to